---
updatedAt: 2026-06-15T13:51:20.000Z
agentTools:
  siteIndex: https://developer.jamf.com/llms.txt
  projectIndex: https://developer.jamf.com/jamf-pro/llms.txt
---

# Update Enrollment object


Update enrollment object. Regarding the `developerCertificateIdentity`,
if this object is omitted, the certificate will not be deleted from Jamf Pro.
The `identityKeystore` is the entire cert file as a base64 encoded string. The
`md5Sum` field is not required in the PUT request, but is calculated and returned
in the response.


> 📋 **Required privilege:** Update User-Initiated Enrollment

# OpenAPI definition

```json
{
  "openapi": "3.0.1",
  "info": {
    "title": "Jamf Pro API",
    "termsOfService": "https://www.jamf.com/developer-resources/api-license-agreement",
    "version": "11.33.0"
  },
  "servers": [
    {
      "url": "https://yourServer.jamfcloud.com/api"
    }
  ],
  "x-readme": {
    "samples-languages": [
      "curl",
      "swift",
      "ruby",
      "python"
    ],
    "explorer-enabled": false
  },
  "security": [
    {
      "Bearer": []
    },
    {
      "ApiClient": []
    },
    {
      "BasicAuth": [
        "/v1/auth/token"
      ]
    }
  ],
  "paths": {
    "/v4/enrollment": {
      "put": {
        "tags": [
          "enrollment"
        ],
        "summary": "Update Enrollment object\n",
        "description": "Update enrollment object. Regarding the `developerCertificateIdentity`,\nif this object is omitted, the certificate will not be deleted from Jamf Pro.\nThe `identityKeystore` is the entire cert file as a base64 encoded string. The\n`md5Sum` field is not required in the PUT request, but is calculated and returned\nin the response.\n\n\n> 📋 **Required privilege:** Update User-Initiated Enrollment",
        "requestBody": {
          "description": "Update enrollment",
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/EnrollmentSettingsV4"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "Successfully updated enrollment object",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/EnrollmentSettingsV4"
                }
              }
            }
          },
          "400": {
            "description": "Bad request",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ApiError"
                }
              }
            }
          }
        },
        "x-required-privileges": [
          "Update User-Initiated Enrollment"
        ]
      }
    }
  },
  "components": {
    "schemas": {
      "ApiError": {
        "type": "object",
        "properties": {
          "httpStatus": {
            "type": "integer",
            "description": "HTTP status of the response",
            "example": 400
          },
          "errors": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/ApiErrorCause"
            }
          }
        }
      },
      "ApiErrorCause": {
        "required": [
          "field"
        ],
        "type": "object",
        "properties": {
          "code": {
            "type": "string",
            "description": "Error-specific code that can be used to identify localization string, etc.",
            "example": "8675309"
          },
          "field": {
            "type": "string",
            "description": "Name of the field that caused the error.",
            "example": "Name"
          },
          "description": {
            "type": "string",
            "description": "A general description of error for troubleshooting/debugging. Generally this text should not be displayed to a user; instead refer to errorCode and it's localized text",
            "example": "I've just picked up a fault in the AE35 unit. It's going to go 100% failure in 72 hours"
          },
          "id": {
            "type": "string",
            "description": "id of object with error. Optional.",
            "nullable": true,
            "example": "3"
          }
        }
      },
      "CertificateDetails": {
        "type": "object",
        "properties": {
          "subject": {
            "type": "string",
            "default": ""
          },
          "serialNumber": {
            "type": "string",
            "default": ""
          }
        }
      },
      "CertificateIdentityV2": {
        "type": "object",
        "properties": {
          "filename": {
            "type": "string",
            "default": "null"
          },
          "keystorePassword": {
            "type": "string",
            "format": "password",
            "writeOnly": true,
            "default": ""
          },
          "identityKeystore": {
            "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$",
            "type": "string",
            "description": "The base 64 encoded certificate.",
            "format": "byte",
            "writeOnly": true,
            "example": "WlhoaGJYQnNaU0J2WmlCaElHSmhjMlUyTkNCbGJtTnZaR1ZrSUhaaGJHbGtJSEF4TWk0Z2EyVjVjM1J2Y21VZ1ptbHNaUT09"
          },
          "md5Sum": {
            "type": "string",
            "description": "The md5 checksum of the certificate file. Intended to be used in verification the cert being used to sign QuickAdd packages.",
            "readOnly": true,
            "default": ""
          }
        },
        "nullable": true
      },
      "EnrollmentSettingsV4": {
        "required": [
          "managementUsername"
        ],
        "type": "object",
        "properties": {
          "installSingleProfile": {
            "type": "boolean",
            "default": false
          },
          "signingMdmProfileEnabled": {
            "type": "boolean",
            "default": false
          },
          "mdmSigningCertificate": {
            "$ref": "#/components/schemas/CertificateIdentityV2"
          },
          "restrictReenrollment": {
            "type": "boolean",
            "default": false
          },
          "flushLocationInformation": {
            "type": "boolean",
            "default": false
          },
          "flushLocationHistoryInformation": {
            "type": "boolean",
            "default": false
          },
          "flushPolicyHistory": {
            "type": "boolean",
            "default": false
          },
          "flushExtensionAttributes": {
            "type": "boolean",
            "default": false
          },
          "flushSoftwareUpdatePlans": {
            "type": "boolean",
            "default": false
          },
          "flushMdmCommandsOnReenroll": {
            "type": "string",
            "enum": [
              "DELETE_NOTHING",
              "DELETE_ERRORS",
              "DELETE_EVERYTHING_EXCEPT_ACKNOWLEDGED",
              "DELETE_EVERYTHING"
            ],
            "default": "DELETE_EVERYTHING_EXCEPT_ACKNOWLEDGED"
          },
          "macOsEnterpriseEnrollmentEnabled": {
            "type": "boolean",
            "default": false
          },
          "managementUsername": {
            "type": "string",
            "example": "radmin",
            "default": ""
          },
          "createManagementAccount": {
            "type": "boolean",
            "default": true
          },
          "hideManagementAccount": {
            "type": "boolean",
            "default": false
          },
          "allowSshOnlyManagementAccount": {
            "type": "boolean",
            "default": false
          },
          "ensureSshRunning": {
            "type": "boolean",
            "default": true
          },
          "launchSelfService": {
            "type": "boolean",
            "default": false
          },
          "signQuickAdd": {
            "type": "boolean",
            "default": false
          },
          "developerCertificateIdentity": {
            "$ref": "#/components/schemas/CertificateIdentityV2"
          },
          "developerCertificateIdentityDetails": {
            "$ref": "#/components/schemas/CertificateDetails"
          },
          "mdmSigningCertificateDetails": {
            "$ref": "#/components/schemas/CertificateDetails"
          },
          "iosEnterpriseEnrollmentEnabled": {
            "type": "boolean",
            "default": true
          },
          "iosPersonalEnrollmentEnabled": {
            "type": "boolean",
            "default": false
          },
          "personalDeviceEnrollmentType": {
            "type": "string",
            "description": "**Deprecated as of 11.25.** This field always returns \"USERENROLLMENT\" in GET responses and ignores any input values in PUT requests.\n",
            "readOnly": true,
            "deprecated": true,
            "default": "USERENROLLMENT"
          },
          "accountDrivenUserEnrollmentEnabled": {
            "type": "boolean",
            "default": false
          },
          "accountDrivenDeviceIosEnrollmentEnabled": {
            "type": "boolean",
            "default": false
          },
          "accountDrivenDeviceMacosEnrollmentEnabled": {
            "type": "boolean",
            "default": false
          },
          "accountDrivenUserVisionosEnrollmentEnabled": {
            "type": "boolean",
            "default": false
          },
          "accountDrivenDeviceVisionosEnrollmentEnabled": {
            "type": "boolean",
            "default": false
          },
          "maidUsernameMergeEnabled": {
            "type": "boolean",
            "default": false
          }
        }
      }
    },
    "securitySchemes": {
      "Bearer": {
        "type": "http",
        "scheme": "bearer",
        "bearerFormat": "JWT"
      },
      "BasicAuth": {
        "type": "http",
        "description": "Basic auth is used only for obtaining bearer tokens from the /v1/auth/token endpoint",
        "scheme": "basic"
      },
      "ApiClient": {
        "type": "oauth2",
        "description": "Jamf Pro API Roles and Clients provide a client ID and secret for obtaining access tokens using the OAuth2 client_credentials grant type",
        "flows": {
          "clientCredentials": {
            "tokenUrl": "/api/v1/oauth/token",
            "scopes": {}
          }
        }
      }
    }
  }
}
```